How preg_replace e works, How to exploit it and how to Prevent

Bug Bounty Write-Up

Update 25.01.2021: Added Google engineers exploit method for getting access token.   Google Cloud Monitoring (formerly called Stackdriver)...

Browse public HackerOne bug bounty program statisitcs via vulnerability type. BugBountyHunter is a custom platform created by zseano designed to help you get involved in bug bounties and begin participating from the comfort of your own home.

I've just added an API routes wordlist containing 953011 possible API paths from the HTTPArchive dataset. Download it at https://t.co/Y04dyFY5q1 - all paths which start with "/api/", "/v1/", "/v2", or "/rest/". Good luck hacking! Thanks for requesting this…

iOS Facebook Messenger Leaking Users Access Token POC 2020 Bounty: 15k$ https://t.co/PEWlV9NL0x #bugbounty #bugbountytips #bugbountywriteup #security #facebook

Different methodology to Recon targets

Subdomains Enumeration + File Bruteforcing + Code Review = $10K Blind SSRF

Hi everyone, today I’m gonna talk about vulnerability that I found it in IBM that allowed me to get full access on many services.

Hello all the amazing hackers and cyber security enthusiasts. My name is Vedant and I’m an aspiring bug bounty hunter and a cyber security…

S

Hi All,

This time Ron talks about two bugs he found in 1Password that worth $3,300, at the end of the video, he also shares three bug bounty tips to improve your hacking skills.

This video is sponsored by Intigriti. Join Intigriti to become an ethical hacker today:…

In this video, Ron Chan talks about a $20,000 bug that could've allowed attackers to read anyone's outlook email.

Hello My Name Orwa Atyat

Top disclosed reports from HackerOne. Contribute to reddelexc/hackerone-reports development by creating an account on GitHub.